From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id 83D8BC2D0CD for ; Wed, 21 May 2025 12:47:04 +0000 (UTC) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1uHiqH-0003q0-GC; Wed, 21 May 2025 08:46:41 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1uHipy-0003nR-V9 for grub-devel@gnu.org; Wed, 21 May 2025 08:46:23 -0400 Received: from mx0a-001b2d01.pphosted.com ([148.163.156.1]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1uHipw-00048c-Ba for grub-devel@gnu.org; Wed, 21 May 2025 08:46:22 -0400 Received: from pps.filterd (m0360083.ppops.net [127.0.0.1]) by mx0a-001b2d01.pphosted.com (8.18.1.2/8.18.1.2) with ESMTP id 54L8pO9N014209; Wed, 21 May 2025 12:46:15 GMT DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ibm.com; h=cc :content-transfer-encoding:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to; s=pp1; bh=E1p6aS Iq3MtuRYWXRqIw6PT/7PPV3n9sx2GoOmY4GMc=; b=SA70LOEiELnkqoc4LHUFW1 SYBIKyjPNVlt/yhXWxADMBDaBYJPcHpYGKusISSQLSdqoJThAWg7JcgTIuwAig6D lyH+cX6X1lR3wvYQ3U+gEa+ZvsdP/CpMYh1p0JG/fr43W8AZWlq++uYiGBdb5I+N 8HVeVHwOOzQ+NVanL+LN2V2+FY3ds6rbBNAbKXITmf1r90WYlTzrUGCUyV8LwdF/ bMtqt9SBMAb97CKCeWvTlhZXMkJ73EGSGrQPWV+TiFP33uaxJOWxO4ySeHRfvjDt goVL6E1eu3XvAlyh3KWRyjesv97y7ttIe3M3iRE52PPXt/rp8zkI1l1Ga65ntPpA == Received: from ppma11.dal12v.mail.ibm.com (db.9e.1632.ip4.static.sl-reverse.com [50.22.158.219]) by mx0a-001b2d01.pphosted.com (PPS) with ESMTPS id 46sbph12uk-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Wed, 21 May 2025 12:46:15 +0000 (GMT) Received: from pps.filterd (ppma11.dal12v.mail.ibm.com [127.0.0.1]) by ppma11.dal12v.mail.ibm.com (8.18.1.2/8.18.1.2) with ESMTP id 54L9j3rW032070; Wed, 21 May 2025 12:46:14 GMT Received: from smtprelay01.wdc07v.mail.ibm.com ([172.16.1.68]) by ppma11.dal12v.mail.ibm.com (PPS) with ESMTPS id 46rwnmc6tb-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Wed, 21 May 2025 12:46:14 +0000 Received: from smtpav04.wdc07v.mail.ibm.com (smtpav04.wdc07v.mail.ibm.com [10.39.53.231]) by smtprelay01.wdc07v.mail.ibm.com (8.14.9/8.14.9/NCO v10.0) with ESMTP id 54LCkCM429426416 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Wed, 21 May 2025 12:46:12 GMT Received: from smtpav04.wdc07v.mail.ibm.com (unknown [127.0.0.1]) by IMSVA (Postfix) with ESMTP id 9AE6158052; Wed, 21 May 2025 12:46:12 +0000 (GMT) Received: from smtpav04.wdc07v.mail.ibm.com (unknown [127.0.0.1]) by IMSVA (Postfix) with ESMTP id 924F658061; Wed, 21 May 2025 12:46:11 +0000 (GMT) Received: from ltc.linux.ibm.com (unknown [9.5.196.140]) by smtpav04.wdc07v.mail.ibm.com (Postfix) with ESMTP; Wed, 21 May 2025 12:46:11 +0000 (GMT) MIME-Version: 1.0 Date: Wed, 21 May 2025 18:16:11 +0530 From: sudhakar To: Gary Lin Cc: grub-devel@gnu.org, dja@axtens.net, jan.setjeeilers@oracle.com, julian.klode@canonical.com, mate.kukri@canonical.com, pjones@redhat.com, msuchanek@suse.com, mlewando@redhat.com, stefanb@linux.ibm.com, nayna@linux.ibm.com, ltcgcw@linux.vnet.ibm.com, ssrish@linux.ibm.com Subject: Re: [PATCH v2 20/21] appendedsig: The grub command's trusted and distrusted support In-Reply-To: References: <20250326193242.703506-1-sudhakar@linux.ibm.com> <20250326193242.703506-21-sudhakar@linux.ibm.com> Message-ID: <6223565dc31bb4497ff10ad663616847@linux.ibm.com> X-Sender: sudhakar@linux.ibm.com X-TM-AS-GCONF: 00 X-Proofpoint-Spam-Details-Enc: AW1haW4tMjUwNTIxMDEyMiBTYWx0ZWRfX5wF4XBegj32n OKJE4ihBZMIvKOxmwzIxGM/WpoSbwR+tlsN4BVEON8n+rQOuva2n+k6qV5b5y6I45UYYQ+6HJU5 SUiWOdE8BpMBAegoN32GSWC4+xgO6cUB3NRBZ5xjYLdBwC93ylPbTFG0V13408jqHCjCTq/r4C/ eUS9fR1SDZmtV4DJnVbFAJ7oe4UDAjFuH+0saAM+/Mb1TGmGAYbv8I40365dCRmmha57nm66H3U 4JFuhda0HvQbEXr6/e++2bNsMBLaF9waJpC4eamkDvcEeD0S8Gyo51qmBe50p7pBR4LbQd4qyq2 hli+gUjGkUk5hSTPCLF0IZWG8FsqgHCJGVwEIbVUMwzolzjkGS/pj4nyRBqoShqVY5DUG85IrYX Tll7U2KhIhuAFedJDTdHknHw2DzAqzVKwQfPR6U35FNo4QP7aO2AWxxcQRZofUB3yC0vXxeb X-Proofpoint-ORIG-GUID: Uro4_hgZXGruCUE8dhDOiSPLziBR2nuw X-Authority-Analysis: v=2.4 cv=L5kdQ/T8 c=1 sm=1 tr=0 ts=682dcb17 cx=c_pps a=aDMHemPKRhS1OARIsFnwRA==:117 a=aDMHemPKRhS1OARIsFnwRA==:17 a=kj9zAlcOel0A:10 a=dt9VzEwgFbYA:10 a=VnNF1IyMAAAA:8 a=Sfr5vcsdRPnLfBRuON4A:9 a=CjuIK1q_8ugA:10 X-Proofpoint-GUID: Uro4_hgZXGruCUE8dhDOiSPLziBR2nuw X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.293,Aquarius:18.0.1099,Hydra:6.0.736,FMLib:17.12.80.40 definitions=2025-05-21_04,2025-05-20_03,2025-03-28_01 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 adultscore=0 priorityscore=1501 lowpriorityscore=0 spamscore=0 clxscore=1011 mlxlogscore=880 suspectscore=0 phishscore=0 impostorscore=0 malwarescore=0 mlxscore=0 bulkscore=0 classifier=spam authscore=0 authtc=n/a authcc= route=outbound adjust=0 reason=mlx scancount=1 engine=8.19.0-2505160000 definitions=main-2505210122 Received-SPF: pass client-ip=148.163.156.1; envelope-from=sudhakar@linux.ibm.com; helo=mx0a-001b2d01.pphosted.com X-Spam_score_int: -26 X-Spam_score: -2.7 X-Spam_bar: -- X-Spam_report: (-2.7 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H5=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: grub-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: The development of GNU GRUB List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: The development of GNU GRUB Content-Transfer-Encoding: base64 Content-Type: text/plain; charset="utf-8"; Format="flowed" Errors-To: grub-devel-bounces+grub-devel=archiver.kernel.org@gnu.org Sender: grub-devel-bounces+grub-devel=archiver.kernel.org@gnu.org SGkgR2FyeSBMaW4sClRoYW5rIHlvdSBzbyBtdWNoIGZvciBhIHJldmlldyEuIEkgd2lsIGZpeCB0 aGUgYnVnIGluIHRoZSBjb2RlIG1lbnRpb25lZCAKYnkgeW91LgoKVGhhbmtzLApTdWRoYWthciBL dXBwdXNtYXkKCk9uIDIwMjUtMDQtMTcgMTM6MTMsIEdhcnkgTGluIHdyb3RlOgo+IE9uIFRodSwg TWFyIDI3LCAyMDI1IGF0IDAxOjAyOjQxQU0gKzA1MzAsIFN1ZGhha2FyIEt1cHB1c2FteSB3cm90 ZToKPj4gVG8gc3VwcG9ydCB0aGUgZm9sbG93aW5nIHRydXN0ZWQgYW5kIGRpc3RydXN0ZWQgY29t bWFuZHMKPj4gCj4+ICAgMS4gdHJ1c3RlZF9saXN0Ogo+PiAgICAgICAgIEl0IHdpbGwgc2hvdyB0 aGUgbGlzdCBvZiB0cnVzdGVkIGNlcnRpZmljYXRlcyBhbmQgYmluYXJ5IAo+PiBoYXNoZXMKPj4g ICAyLiBkaXN0cnVzdGVkX2xpc3Q6Cj4+ICAgICAgICAgSXQgd2lsbCBzaG93IHRoZSBsaXN0IG9m IGRpc3RydXN0ZWQgY2VydGlmaWNhdGVzIGFuZCAKPj4gYmluYXJ5L2NlcnRpZmljYXRlIGhhc2hl cwo+PiAgIDMuIHRydXN0ZWRfY2VydGlmaWNhdGU6Cj4+ICAgICAgICAgSXQgd2lsbCBhZGQgdGhl IHRydXN0ZWQgY2VydGlmaWNhdGUgdG8gdGhlIHRydXN0ZWQgbGlzdAo+IFRoZXJlIGFyZSBhIGZl dyBidWdzIGluIGdydWJfY21kX2Rpc3RydXN0ZWRfY2VydCgpLgo+IAo+PiAgIDQuIHRydXN0ZWRf c2lnbmF0dXJlOgo+PiAgICAgICAgIEl0IHdpbGwgYWRkIHRoZSBjZXJ0aWZpY2F0ZS9iaW5hcnkg aGFzaCB0byB0aGUgdHJ1c3RlZCBsaXN0Cj4+ICAgNS4gZGlzdHJ1c3RlZF9jZXJ0aWZpY2F0ZToK Pj4gICAgICAgICBJdCB3aWxsIHJlbW92ZSB0aGUgdHJ1c3RlZCBjZXJ0aWZpY2F0ZSBmcm9tIHRy c3V0ZWQgbGlzdAo+PiAgIDYuIGRpc3RydXN0ZWRfc2lnbmF0dXJlOgo+PiAgICAgICAgIEl0IHdp bGwgYWRkIHRoZSBjZXJ0aWZpY2F0ZS9iaW5hcnkgaGFzaCB0byB0aGUgZGlzdHJzdXRlZCBsaXN0 Cj4+IAo+PiBOb3RlOi0KPj4gICAgVGhlIGFkZGl0aW9uL2RlbGV0aW9uIG9mIHRydXN0ZWQgY2Vy dGlmaWNhdGVzIGFuZCBiaW5hcnkgaGFzaGVzCj4+IGFyZSBub3QgYWxsb3dlZCBpbiBncnViIGNv bW1hbmQgcHJvbXB0IHdoaWxlIHNlY3VyZSBib290IGlzIGVuYWJsZWQuCj4+IAo+PiBTaWduZWQt b2ZmLWJ5OiBTdWRoYWthciBLdXBwdXNhbXkgPHN1ZGhha2FyQGxpbnV4LmlibS5jb20+Cj4+IFJl dmlld2VkLWJ5OiBBdm5pc2ggQ2hvdWhhbiA8YXZuaXNoQGxpbnV4LmlibS5jb20+Cj4+IC0tLQo+ PiAgZ3J1Yi1jb3JlL2NvbW1hbmRzL2FwcGVuZGVkc2lnL2FwcGVuZGVkc2lnLmMgfCA1MTggCj4+ ICsrKysrKysrKysrKystLS0tLS0KPj4gIDEgZmlsZSBjaGFuZ2VkLCAzNTEgaW5zZXJ0aW9ucygr KSwgMTY3IGRlbGV0aW9ucygtKQo+PiAKPj4gZGlmZiAtLWdpdCBhL2dydWItY29yZS9jb21tYW5k cy9hcHBlbmRlZHNpZy9hcHBlbmRlZHNpZy5jIAo+PiBiL2dydWItY29yZS9jb21tYW5kcy9hcHBl bmRlZHNpZy9hcHBlbmRlZHNpZy5jCj4+IGluZGV4IDU2MzFmMGFiNC4uNmY2NjVhYWIyIDEwMDY0 NAo+PiAtLS0gYS9ncnViLWNvcmUvY29tbWFuZHMvYXBwZW5kZWRzaWcvYXBwZW5kZWRzaWcuYwo+ PiArKysgYi9ncnViLWNvcmUvY29tbWFuZHMvYXBwZW5kZWRzaWcvYXBwZW5kZWRzaWcuYwo+PiBA QCAtMTE3LDYgKzExNywzNiBAQCBzdGF0aWMgZW51bQo+IAo+IC0tLS0tPjgtLS0tLQo+IAo+PiAr Cj4+ICtzdGF0aWMgZ3J1Yl9lcnJfdAo+PiArZ3J1Yl9jbWRfZGlzdHJ1c3RlZF9jZXJ0IChncnVi X2NvbW1hbmRfdCBjbWQgX19hdHRyaWJ1dGVfXygodW51c2VkKSksIAo+PiBpbnQgYXJnYywgY2hh ciAqKmFyZ3MpCj4+ICt7Cj4+ICsgIGdydWJfc2l6ZV90IGNlcnRfbnVtID0gMCwgaSA9IDE7Cj4+ ICsgIHN0cnVjdCB4NTA5X2NlcnRpZmljYXRlICpjdXJyZW50X2NlcnQgPSBkYi5rZXlzOwo+PiAr ICBzdHJ1Y3QgeDUwOV9jZXJ0aWZpY2F0ZSAqcHJldmlvdXNfY2VydCA9IGRiLmtleXM7Cj4+ICsK Pj4gKyAgaWYgKGFyZ2MgIT0gMSkKPj4gKyAgICB7Cj4+ICsgICAgICBncnViX3ByaW50ZiAoTl8o InRydXN0ZWQgY2VydGlmaWNhdGUgbnVtYmVyIGlzIGV4cGVjdGVkXG4iCj4+ICsgICAgICAgICAg ICAgICAgICAgICAgIkV4YW1wbGU6XG5cdGRpc3RydXN0ZWRfY2VydGlmaWNhdGUgCj4+IDxDRVJU X05VTUVSPlxuIikpOwo+PiArICAgICAgcmV0dXJuIEdSVUJfRVJSX0JBRF9BUkdVTUVOVDsKPj4g KyAgICB9Cj4+ICsKPj4gKyAgaWYgKGNoZWNrX3NpZ3MgPT0gY2hlY2tfc2lnc19mb3JjZWQpCj4+ ICsgICAgewo+PiArICAgICAgZ3J1Yl9wcmludGYgKCJXYXJuaW5nOiBzaW5jZSBzZWN1cmUgYm9v dCBpcyBlbmFibGVkLCAiCj4+ICsgICAgICAgICAgICAgICAgICAgInJlbW92aW5nIG9mIHRydXN0 ZWQgY2VydGlmaWNhdGUgaXMgbm90IAo+PiBwZXJtaXR0ZWQhXG4iKTsKPj4gKyAgICAgIHJldHVy biBncnViX2Vycm5vOwo+PiArICAgIH0KPj4gKwo+PiArICBjZXJ0X251bSA9IGdydWJfc3RydG91 bCAoYXJnc1swXSwgTlVMTCwgMTApOwo+PiArICBpZiAoY2VydF9udW0gPCAxKQo+PiArICAgIHJl dHVybiBncnViX2Vycm9yIChHUlVCX0VSUl9CQURfQVJHVU1FTlQsCj4+ICsgICAgICAgICAgICAg ICAgICAgICAgIE5fKCJ0cnVzdGVkIGNlcnRpZmljYXRlIG51bWJlciBzaG91bGQgdG8gYmVnaW4g Cj4+IHdpdGggMSIpKTsKPj4gKwo+PiArICBpZiAoY2VydF9udW0gPiBkYi5rZXlfZW50cmllcykK Pj4gKyAgICByZXR1cm4gZ3J1Yl9lcnJvciAoR1JVQl9FUlJfQkFEX0FSR1VNRU5ULAo+PiArICAg ICAgICAgICAgICAgICAgICAgICBOXygidHJ1c3RlZCBjZXJ0aWZpY2F0ZSBudW1iZXIgc2hvdWxk IG5vdCAKPj4gZXhjZWVkICUiIFBSSXVHUlVCX1NJWkUgIiIpLAo+PiArICAgICAgICAgICAgICAg ICAgICAgICBkYi5rZXlfZW50cmllcyk7Cj4+ICsgIGVsc2UgaWYgKGNlcnRfbnVtIDwgZGIua2V5 X2VudHJpZXMpCj4+ICsgICAgcmV0dXJuIGdydWJfZXJyb3IgKEdSVUJfRVJSX0JBRF9BUkdVTUVO VCwKPj4gKyAgICAgICAgICAgICAgICAgICAgICAgTl8oInRoZXJlIGlzIG5vIGNlcnRpZmljYXRl IG9uIHRoZSB0cnVzdGVkIAo+PiBsaXN0LiBzbywgbm90IHBlcm1pdHRlZCIpKTsKPiBUaGUgJ2Vs c2UgaWYnIGxvb2tzIHdyb25nIHNpbmNlIGl0J3MgdG90YWxseSBmaW5lIHRvIGhhdmUgYSBjZXJ0 IG51bWJlcgo+IHNtYWxsZXIgdGhhbiBkYi5rZXlfZW50cmllcy4gUGVyIHRoZSBlcnJvciBtZXNz YWdlLCBpdCBzaG91bGQgYmUKPiAnZGIua2V5X2VudHJpZXMgPT0gMCcuCj4gCj4+ICsKPj4gKyAg Zm9yIChpID0gMTsgaSA8IGRiLmtleV9lbnRyaWVzOyBpKyspCj4gSXQgaGFzIHRvIGJlICdpIDw9 IGRiLmtleV9lbnRyaWVzJy4gT3RoZXJ3aXNlLCB0aGUgbGFzdCBjZXJ0aWZpY2F0ZSBpbgo+IHRo ZSBsaXN0IGlzIGFsd2F5cyBpZ25vcmVkLgo+IAo+PiArICAgIHsKPj4gKyAgICAgIGlmIChjZXJ0 X251bSA9PSAxKQo+PiAgICAgICAgICB7Cj4+IC0gICAgICAgICAgZ3J1Yl9wcmludGYgKCIlMDJ4 OiIsIGNlcnQtPnNlcmlhbFtpXSk7Cj4+ICsgICAgICAgICAgcHJldmlvdXNfY2VydCA9IGN1cnJl bnRfY2VydC0+bmV4dDsKPiBDaGFuZ2luZyAncHJldmlvdXNfY2VydCcgaGVyZSB3b24ndCBhZmZl Y3QgJ2RiLmtleXMnLCBzbyB0aGUgbmV4dCB1c2VyCj4gb2YgJ2RiLmtleXMnIHdpbGwgZ2V0ICdj dXJyZW50X2NlcnQnIGluc3RlYWQgb2YgJ2N1cnJlbnRfY2VydC0+bmV4dCcsCj4gYW5kIHRoaXMg bGVhZHMgdG8gY3Jhc2guIEknZCBzdWdnZXN0IHRvIGFkZDoKPiAKPiAJICAgICBkYi5rZXlzID0g Y3VycmVudF9jZXJ0LT5uZXh0Owo+IAo+PiArICAgICAgICAgIGJyZWFrOwo+PiArICAgICAgICB9 Cj4+ICsgICAgICBlbHNlIGlmIChjZXJ0X251bSA9PSBpKQo+PiArICAgICAgICB7Cj4+ICsgICAg ICAgICAgcHJldmlvdXNfY2VydC0+bmV4dCA9IGN1cnJlbnRfY2VydC0+bmV4dDsKPj4gKyAgICAg ICAgICBicmVhazsKPj4gICAgICAgICAgfQo+PiAtICAgICAgZ3J1Yl9wcmludGYgKCIlMDJ4XG4i LCBjZXJ0LT5zZXJpYWxbY2VydC0+c2VyaWFsX2xlbiAtIDFdKTsKPj4gCj4+IC0gICAgICBncnVi X3ByaW50ZiAoIlx0Q046ICVzXG5cbiIsIGNlcnQtPnN1YmplY3QpOwo+PiAtICAgICAgY2VydF9u dW0rKzsKPj4gKyAgICAgIHByZXZpb3VzX2NlcnQgPSBjdXJyZW50X2NlcnQ7Cj4+ICsgICAgICBj dXJyZW50X2NlcnQgPSBjdXJyZW50X2NlcnQtPm5leHQ7Cj4+ICAgICAgfQo+PiAKPj4gKyAgY2Vy dGlmaWNhdGVfcmVsZWFzZSAoY3VycmVudF9jZXJ0KTsKPj4gKyAgZ3J1Yl9mcmVlIChjdXJyZW50 X2NlcnQpOwo+PiArCj4gJ2RiLmtleV9lbnRyaWVzJyB3YXNuJ3QgdXBkYXRlZCBpbiB0aGUgd2hv bGUgZnVuY3Rpb24uCj4gCj4gICAgICBkYi5rZXlfZW50cmllcy0tOwo+IAo+PiAgICByZXR1cm4g R1JVQl9FUlJfTk9ORTsKPj4gIH0KPj4gCj4gCj4gQ2hlZXJzLAo+IAo+IEdhcnkgTGluCgpfX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwpHcnViLWRldmVsIG1h aWxpbmcgbGlzdApHcnViLWRldmVsQGdudS5vcmcKaHR0cHM6Ly9saXN0cy5nbnUub3JnL21haWxt YW4vbGlzdGluZm8vZ3J1Yi1kZXZlbAo=